Skip to content

v0.5.3 - Security fix

Choose a tag to compare

View all tags
@morpheuslord morpheuslord released this 04 Oct 16:41
· 106 commits to main since this release
v0.5.3
a4036f5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Fixes CodeQL py/incomplete-url-substring-sanitization alerts #27 to #33.

  • GCP relation extractors (context.py, iam.py, names.py) identified a resource's API service with prefix tests on host-like literals. They now parse the service with anchored regular expressions via new api_service() / asset_type_service() helpers. Behaviour is unchanged: a fuzz of old vs new over 92,147 generated inputs found no differences.
  • Three test assertions that checked host-like literals against lists with in now use set comparison.
  • Version bumped to 0.5.3 (pyproject.toml, cloudg/init.py, README badge, handbook); CHANGELOG and handbook entries added.

ruff check clean, 382 tests pass.

Full Changelog: v0.5.2...v0.5.3

Assets 2
Loading